Classiflying hack tools as virus on windows defender or whatever puts in risk users that want to hack some device but have to disable user defender to use them (and could potentially download malicious software bundled together or inside the hack tool)

Well... Hack tools do use the same techniques as malware.

poor hackers, antivirus is not protecting them :/

Damn you greedy biased corporates!

Hacking tools are determined by their routines, if an application calls a certain stack of functions and tries to make certain changes to the system it will be flagged as malicious. If you then know your stuff you should be able to disable windows defender and turn it back on once you are done.